Skip to content
Fencer Vulns
high 7.2

CVE-2024-36475 json

FutureNet NXR series, VXR series and WXR series provided by Century Systems Co., Ltd.

published 2024-07-17 2 y ago modified 2026-06-17 4 mo ago also EUVD-2024-36112

cvss
7.2
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.6%
EPSS 0.6% chance of exploitation in 30 days, percentile 49%
public exploits
0
none known

Summary

FutureNet NXR series, VXR series and WXR series provided by Century Systems Co., Ltd. contain an active debug code vulnerability. If a user who knows how to use the debug function logs in to the product, the debug function may be used and an arbitrary OS command may be executed.

Patch / fix

  • centurysys futurenet_nxr-1300_firmware 7.4.10
  • centurysys futurenet_nxr-610x_firmware 21.14.11c
  • centurysys futurenet_nxr-g050_firmware 21.12.10
  • centurysys futurenet_nxr-g060_firmware 21.15.6
  • centurysys futurenet_nxr-g100_firmware 6.23.11
  • centurysys futurenet_nxr-g110_firmware 21.7.32
  • centurysys futurenet_nxr-g120_firmware 21.15.2c
  • centurysys futurenet_nxr-g200_firmware 9.12.16
  • centurysys futurenet_vxr-x64 21.7.32
  • centurysys futurenet_vxr-x86 10.1.5
  • centurysys futurenet_nxr-160/lw_firmware 21.8.4
  • centurysys futurenet_nxr-230/c_firmware 5.30.13
  • centurysys futurenet_nxr-350/c_firmware 5.30.9c
  • centurysys futurenet_nxr-530_firmware 21.11.14
  • centurysys futurenet_nxr-650_firmware 21.16.2
  • centurysys futurenet_nxr-g180/l-ca_firmware 21.7.28c

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
total
Assessed
2 y ago

Exploit prediction

0.62% chance of exploitation in the next 30 days, higher than 49% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CISA ADP 3.1 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
NVD 3.1 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CNA 3.1 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

  • Century Systems Co., Ltd. FutureNet NXR-1300 series
  • Century Systems Co., Ltd. FutureNet NXR-650
  • Century Systems Co., Ltd. FutureNet NXR-610X series
  • Century Systems Co., Ltd. FutureNet NXR-530
  • Century Systems Co., Ltd. FutureNet NXR-350/C
  • Century Systems Co., Ltd. FutureNet NXR-230/C
  • Century Systems Co., Ltd. FutureNet NXR-160/LW
  • Century Systems Co., Ltd. FutureNet NXR-G200 series
  • Century Systems Co., Ltd. FutureNet NXR-G180/L-CA
  • Century Systems Co., Ltd. FutureNet NXR-G120 series
  • Century Systems Co., Ltd. FutureNet NXR-G110 series
  • Century Systems Co., Ltd. FutureNet NXR-G100 series
  • Century Systems Co., Ltd. FutureNet NXR-G060 series
  • Century Systems Co., Ltd. FutureNet NXR-G050 series
  • Century Systems Co., Ltd. FutureNet VXR/x64
  • Century Systems Co., Ltd. FutureNet VXR/x86
  • Century Systems Co., Ltd. FutureNet NXR-1200
  • Century Systems Co., Ltd. FutureNet NXR-130/C
  • Century Systems Co., Ltd. FutureNet NXR-155/C series
  • Century Systems Co., Ltd. FutureNet NXR-125/CX
  • Century Systems Co., Ltd. FutureNet NXR-120/C
  • Century Systems Co., Ltd. FutureNet WXR-250
  • centurysys futurenet_nxr-1300_firmware
  • centurysys futurenet_nxr-650_firmware
  • centurysys futurenet_nxr-610x_firmware
  • centurysys futurenet_nxr-530_firmware
  • centurysys futurenet_nxr-350\/c_firmware
  • centurysys futurenet_nxr-230\/c_firmware
  • centurysys futurenet_nxr-160\/lw_firmware
  • centurysys futurenet_nxr-g200_firmware
  • centurysys futurenet_nxr-g180\/l-ca_firmware
  • centurysys futurenet_nxr-g120_firmware
  • centurysys futurenet_nxr-g110_firmware
  • centurysys futurenet_nxr-g100_firmware
  • centurysys futurenet_nxr-g060_firmware
  • centurysys futurenet_nxr-g050_firmware
  • centurysys futurenet_vxr\/x64_firmware
  • centurysys futurenet_vxr\/x86_firmware
  • centurysys futurenet_nxr-1200_firmware
  • centurysys futurenet_nxr-130\/c_firmware
  • centurysys futurenet_nxr-155\/c_firmware
  • centurysys futurenet_nxr-125\/cx_firmware
  • centurysys futurenet_nxr-120\/c_firmware
  • centurysys futurenet_wxr-250_firmware

Classification

Weakness
  • CWE-489 Active Debug Code
  • CWE-78 Improper Neutralization of Special Elements used in an OS Command

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.